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□TAILED ACTION 
Claim Rejections - 35 USC§102 



1. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

2. Claims 1-3 are rejected under 35 U.S.C. 102(b) as being anticipated by Holloway 
et al. US Patent No. 5,805,801 . 

a. As per claim 1: 

Holloway discloses A MAC (media access control) address-based 
communication restricting method (Col 3, lines 15-16) comprising the steps of: 

• Receiving packet data upon request of communication through at least 
one port of a plurality of ports of an Ethernet switch (Col16, lines 27-30); 

• Reading a MAC destination address and a MAC source address included 
in the received packet data (item 145 of FIG 10 and item 131 FIG 11); 

• Detecting. In an address table, access vectors corresponding to the MAC 
destination and source address (FIG 6 and Col 9, lines 49-51 with Col 3, 
lines 7-9 / Holloway teaches using combination of data structures AAL 
(access authorization list) and ICD (interconnected device list) the ICD will 
contain information on connected MAC addresses to the specific Managed 
hub while the AAL will contain the security access control information for 
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each device. The combination of those two will perform the same function 
as the address table); 
• Denying access if the access vectors of the MAC destination and source 
addresses are not matched (Col 3, lines 9-11; if the managed hub detects 
an unauthorized station connecting to the LAN the hub disables the port/ 
disabling the hub will perform the step of denying access), 
b. As per claim 2: 

Holloway teaches the system further comprising steps of: 

• Configuring an anti-hacker table comprising information pertaining to a 
plurality of client nodes and a plurality of server nodes of a network, 
wherein each client node is identified by a corresponding MAC 
address, a corresponding host identification and a corresponding IP 
(Internet protocol) address, and each server node is identified by a 
corresponding MAC address, a corresponding IP (Internet protocol) 
address (Col 7 lines 7-13 and FIG 7; Holloway method teaches the 
AAL table and Breach list table with no IP address but he also teaches 
in Col 17 lines 15-17 that the list can be extended to contain the IP 
address ); 

• Determining whether the received MAC source address is stored in 
said address table (item 132 of FIG 11 and Col 11 lines 14-16); 
configuring an address entry for said received MAC source address 
when it is determined that said MAC source address is not stored in 
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said address table and identifying said received MAC source address 
as a new MAC source address (item 135 of FIG 1 1 , Colli lines 21-29, 
item 137 of FIG 11 and Col 11 lines 31-34); 

• Determining whether said new MAC source address is stored in said 
anti-hacker table (item 220 of FIG 12 and Col 1 1 , lines 62-64); 

• And storing the configured address entry for said received MAC 
source address in said address table when it is determined that said 
new MAC source address is not stored in said anti-hacker table (item 
265 of FIG 12 and Col 12 lines 17-23). 

c. Asp per claim 3: 

801 ' teaches the system further comprising: 

• Adding a port number, corresponding to the port through which said 
packet data was received, to a storage area corresponding to said new 
MAC source address in said anti-hacker table (item 265 of FIG 12 and 
Col 12 lines 17-20); 

• Modifying an access vector included in said configured address entry 
for said new MAC source address, to set security (item 320 of FIG 13 
and Col 13 lines 34-36 / setting the filter in Holloway system perform 
the task of setting security by defining which MAC addresses are 
allowed or denied access to the destination MAC addresses); and 
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• Storing the configured address entry including the modified access for 
said new Mac source address in said address table (items 320,322 of 
FIG 13 and lines 34-41 / setting up the filter and checking if the filter 
has been applied, implies that the filter containing the MAC address is 
stored on the device memory). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Firas Alomari whose telephone number is (571) 272- 
7963. The examiner can normally be reached on Mon-Fri. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, AYAZ SHEIKH can be reached on (571) 272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

Firas Alomari 
Art Unit 2136 



